My planned work on networking stack

[Andre Oppermann]

Gleb Smirnoff wrote:
> 
> On Thu, Mar 04, 2004 at 12:26:51PM -0500, James wrote:
> J> >    that was my thought initially, BUT.. actually... you can
> J> >    actually do this no problem using mrtd dumps and pick it up with a
> J> >    program via bgp device :P no need to create another api it seems :)
> J>
> J> errr??? I meant bpf device...
> 
>  Implementing traffic accounting like ip accounting or netflow through
> a bpf is generally a bad idea, because of poor performance of such a solution.

This is not the case.  While common wisdom does indeed suggest that BPF
is slow it is in fact not the case.  We have a netflow-like per AS-number
traffic accounting daemon which takes only 2-3% of the CPU on our core
routers.  We are currently preparing that software package for public
release.

-- 
Andre